Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2019-14828

A vulnerability was found in Moodle affecting 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions, where users with the capability to create courses were assigned as a teacher in those courses, regardless of whether they had the capability to be automatically assigned that role.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 36.0%
CVSS Severity
CVSS v3 Score 4.3
CVSS v2 Score 4.0
Products affected by CVE-2019-14828
  • Moodle » Moodle » Version: 3.5.0
    cpe:2.3:a:moodle:moodle:3.5.0
  • Moodle » Moodle » Version: 3.5.1
    cpe:2.3:a:moodle:moodle:3.5.1
  • Moodle » Moodle » Version: 3.5.2
    cpe:2.3:a:moodle:moodle:3.5.2
  • Moodle » Moodle » Version: 3.5.3
    cpe:2.3:a:moodle:moodle:3.5.3
  • Moodle » Moodle » Version: 3.5.4
    cpe:2.3:a:moodle:moodle:3.5.4
  • Moodle » Moodle » Version: 3.5.5
    cpe:2.3:a:moodle:moodle:3.5.5
  • Moodle » Moodle » Version: 3.5.6
    cpe:2.3:a:moodle:moodle:3.5.6
  • Moodle » Moodle » Version: 3.5.7
    cpe:2.3:a:moodle:moodle:3.5.7
  • Moodle » Moodle » Version: 3.6.0
    cpe:2.3:a:moodle:moodle:3.6.0
  • Moodle » Moodle » Version: 3.6.1
    cpe:2.3:a:moodle:moodle:3.6.1
  • Moodle » Moodle » Version: 3.6.2
    cpe:2.3:a:moodle:moodle:3.6.2
  • Moodle » Moodle » Version: 3.6.3
    cpe:2.3:a:moodle:moodle:3.6.3
  • Moodle » Moodle » Version: 3.6.4
    cpe:2.3:a:moodle:moodle:3.6.4
  • Moodle » Moodle » Version: 3.6.5
    cpe:2.3:a:moodle:moodle:3.6.5
  • Moodle » Moodle » Version: 3.7.0
    cpe:2.3:a:moodle:moodle:3.7.0
  • Moodle » Moodle » Version: 3.7.1
    cpe:2.3:a:moodle:moodle:3.7.1


Contact Us

Shodan ® - All rights reserved